基于分布式PKI的P2P网络认证技术  

The Authentication Technology of P2P Network Based on Distributed PKI

作　　者：代战锋[1] 温巧燕[1] 李小标[1] 

机构地区：[1]北京邮电大学网络与交换技术国家重点实验室,北京100876

出　　处：《电子学报》2009年第11期2561-2564,共4页Acta Electronica Sinica

基　　金：国家高技术研究发展计划(863计划)项目(No.2006AA01Z419);国家自然科学基金重大研究计划资助项目(No.90604023)

摘　　要：由于P2P网络中的节点具有高度的自治性和随意性,使得网络的内部安全隐患突出.本文提出一种基于椭圆曲线数字签名和门限密钥分享的分布式认证服务模型.模型取代了传统CA的集中式服务器,具有低成本、高可扩展性、高可用性和容侵性.同时采用可验证门限技术确保CA私钥的安全.In the P2P network, nodes can join in or leave freely, and they are highly autonomic. Therefore, the dangerous from the network inside should be noticed. In this paper a decentralized authentication mode, which is based on eclipse curve cryp-tosystem and threshold secret sharing scheme, is proposed. This system replaces the Certificate Authority （CA） central server and has many advantages such as low cost, high adaptation, high availability, and intrusion-tolerance. At the same time, verified secret sharing is used to protect the secret key of CA.

关 键 词：P2P网络 椭圆曲线算法 分布式签名 门限密码 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]